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@ A method of controlling the use of computer programs. 

@ The copy protection of personal computer (PC) software 
distributed on diskettes is assisted by providing a unique 
identification (ID) stored in read only memory (ROM) of a 
personal computer in which software on a diskette is to be 
used. This ID is accessible to the user of the computer. A 
vendor who wishes to protect his diskette-distributed software 
from illegal copying or use provides a source ID on the diskette. 
The personal computer ID is used with the source ID on the 
distributed diskette to produce an encoded check word, using 
any available encryption modality. The check word is generated 
and written onto the distributed diskette during installation and 
copied onto ail backup versions made by the user's personal 
computer. Prior to each use of the program, the software on the 
diskette uses the personal computer and the source IDs and 
check word to verify that the software Is being used on the 
same personal computer on which it was installed. 
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Description 

METHOD OF CONTROLLING THE USE OF COMPUTER PROGRAMS 

iStlTr^S ^ ^ C ompe,i« and predator, 

°Te X«e ^ctor of .he person compuMS in*«y« ™*£ * inIflngemen , nave as Iltt.e « * 
0 ™o^Tt»P<^™ n ^^^?7^^or^^^ •» "° oorrrnonfy-acwowtedged 

=235 rrSss: s- "j^ts^^i 

No 4 of Bass et aLand I U.S. SSS^^^SSS authorized hardware which ,s under the 

CPUID by an encryption modality also on the disKene. n 
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installed in the personal computer wherein the identified CPU is located. The product of the encryption is a 
check number placed on the diskette and used to qualify a check number generated by the encryption 
modality each time the software is executed or copied. If execution or copying is attempted through a CPU 
different from the one on which the software was originally installed, the check number placed on the diskette 
at installation will, in all likelihood, not match that produced by the encryption modality in response to the SID 
on the diskette and the identification of the other CPU. If the check number generated does not match the 
stored one, an evasion process is invoked which prevents user copying of the software on the unauthonzed 
machine. 

The invention is expressed as a method of controlling the use and replication of diskette software contents 
and the like on unauthorized diskette-driven computing systems. The method includes placing a first 
identification (ID) code in a preselected computing system and then associating a second identification (tD) 
code with a source of programming software for the computing system. Next, the second ID code is placed on 
a diskette having a program obtained from the programming source. A first check number is derived through 
encryption of one of the identification codes by the other of the identification codes/ and the check number is 
placed on the diskette. Thereafter, upon access of the diskette by any computing system, a second check is 
number is derived through the encryption based upon the second identification code on the diskette and an 
identification code in the accessing computing system and the second check number is compared with the 
first check number. If the two check numbers are identical, execution or copying of the software proceeds. 
This method contemplates the provision of execution evasion and copy protect features embedded sn the 
software on the diskette and bypassing the features in the event that the two check numbers match. 20 

The invention is expressed also as a system for authorizing the use or replication of diskette software 
contents on selected computing systems, the system including a diskette containing a software program, a 
source identification (SID) code on the diskette associated with and identifying the source of the software, and 
a computing system for receiving the diskette and including at least one CPU having an embedded CPU 
identification (CPUID) code associated with and identifying that CPU. A programming modality is provided in 25 
the software which is executable on the CPU and which generates a check number through encryption of one 
of the ID codes by the other of the ID codes and uses the check number to prevent the execution or copying of 
the software on a CPU other than the identified one. 

The system affords site licensing of the software on the diskette by including a check storage area on the 
diskette for receiving a plurality of check numbers, each generated by the programming modality in response 30 
to the SID and a CPUID from a respective one of a plurality of authorized CPUs operating in the computer 
system The site licensing embodiment also includes provision in the programming modality for using the 
check numbers in the check storage area to prevent execution or copying of the software by an unauthonzed 
CPU 

According to the invention, there is provided a method of controlling the use and replication of diskette 35 
software contents and the like on unauthorized diskette-driven computing systems, said method comprising 
the steps of: 

placing a first ID code in a preselected computing system; 

associating a second ID code with a source of programming software for said computing system; 
placing said second ID number on a diskette bearing a program obtained from said source, said program 
including an execution non-compliance feature; u 
deriving a first check number through encryption of one of said ID numbers by the other of said ID numbers, 
placing said check number on said diskette; and 

upon access of said diskette by any computing system, deriving a second check number through said 
encryption based upon said second ID number on said diskette and an ID number in said accessing computing 
system, comparing said second with said first check number, and bypassing the non-compliance feature in the 
event of a match. . 

In order that the invention may be fully understood, a preferred embodiment thereof will now be described 
with reference to the accompanying drawings in which: 

Figure 1 illustrates the components of the invention in their application context. 

Figure 2 illustrates in greater detail the interconnection of a personal computer with a disk dnver in 
which is inserted a disk configured for practicing the invention. 

Figure 3 is a flow diagram illustrating the practice of the method of the invention during the initial 
installation routine contained in the software of the diskette of Figures 1 and 2. 

Figure 4 is a flow diagram illustrating the method of the invention practiced during a legal execution of 
software installed according to Figure 3. . 

Figure 5 is a flow diagram fragment illustrating the method of the invention dunng copying of the 

diskette of Figures 1 and 2. 

Figure 6 is a representation of a CPUID. 
Figure 7 illustrates an alternative embodiment of the invention. 
Giving reference to Figure 1, a description of the environment in which the invention is to be utilized is now 
presented. The invention is executable upon a combination including a personal computer (PC) 10 and a 
magnetic disk ("diskette") 12. The personal computer can be from any veikdpr, for example, it can compnse 
one selected from any of the PC series available from International Business^Machines Corporation, Armonk, 
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NewYork.Thedisketteiaisaflat^^^ 

be stored by magnetic recording. It is J™*™^**** is the porton of a personal computer that includes 
hardware embracing a central processing un t (CPU) , jh.ch >s the port o P mable entjty whose 

circuits which interpret and execute 'n 8t ^"^^*" t S! sys tem. Personal computers such as the 
basic operations are controlled by a f^^^7^°S£SS^tB m (DOS) such as the DOS 16. The 
PC 10 characteristically operate under the control of ^^^^ as the djsk driV er 18 to manage use 
DOS 16 conventionally operates m connect.on Wlt ^ d.skdnver ku ^ provi des the instructions 

of a diskette such as the diskette 12 ****™^™^£SZi on the diskette 12. 
necessary to operate the disk driver 18 '"^'"^^^ S Wo personal computers. In 

As is known, diskettes are widely used to a ^I^f 0 a 9 diske tte which is transported to and 

this regard, software forming an ^P^^^^'ScX program on the diskette is transferred .n 
inserted in the disk driver of a personal ^P"^ ™* it is used to execute 

whole or in part from the diskette to the primary memory of the P on the diskett e 12 can be 
an application for the user of the computer. *?"™^^ t ^ hown) of the personal computer 10, where it 
loaded through the disk driver 18 into the pWJJJ by he usefof the PC 10. Another generic 

can support the production and processing of do cument >°™* e °°V he . spreadS heet" program, 
appnci'on program distributed on diskettes^ are referred to 

The sequences of instructions which ^^"P^^'X^V refers to any series of instruction steps 
characteristically as "software." In this regar d the term J'^Sal computer for execution thereupon. The 
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diskettes for use in personal computers. nroaram 20. In the program 20, there resides an 

The software on the diskette 12 is ^^^^^^^^^c^^o^^MtOt^X^ 
INSTALL modu.e 21 . an INITIALIZE module 22, and the . ™m body °^ * PP entered into the PC 10 for the initial 
25 program 20 has a COPY PROTECT module 26 LWhw ^^^^ to adapt th e program to the particular 
use of the application 24. the structure of the PJ°8 J? first invoke d to enter data into a parameter 

configuration of the PC 10. In this regard the INSTALL ™ pc 10 For exarnp ,e. the application 
list (not shown) regarding various f^^^^^^^J^tU^q command. In execution of the 
24 may have the capability to echo ^ rok ^ n ^^ b " e Xn^dUito the parameter list, if available on the 
30 INSTALL module 21 , the cursor PO^°™^^^j£ modi ffcoutd include, for example, CRT terminal 
PC 10. Other parameter list data acquired by the '^^J™;],? may acqU ire a list of service options 
type and I/O port addresses. Additional^ the INSTALL ; ^'^^JJ tne q {irst . tirne user of a complex 
available in the application 24 and selected by 1 b ° r in e v0 ^ bythe application program whenever 
application program may select an error ^^^^^^^ response to a program prompt. 
35 the user invokes an incorrect command or funct '™ « a *J£*JeT me parameter list should the configuration 
The INSTALL modu.e can be invoked by "^-J^ olS single diskette in the disk driver of a 
tSXZStSZ X se^ — in any one of a p.urality of persona, 

„ ^eTN^E^eS 

program 24 and operating system 16 v^enever ^the ^ B " e JJ^™^'S m the user, but certainty involves 
application program 24. The INITIALIZE module ^^^^^ e application program 24 in whole or 
fraction with the operating system ^^J^^^^S^^Z Once the application program 
in part into the primary memory of the PC 10 and setting I '"^ J°!JJ m ^p Y PROT ECT module 26 is invoked 

45 24 is installed and initialized, it can be executed on the PC 10. copying. When invoked. 

45 automatically in response to detection of soAwaVe to protect the 

the COPY PROTECT module 26 operates in the mode selected Dy me ais t .u 

application program 24 from ^P^^ c 2S^;. rther includes a source identification (SID) 28, a check 
In the practice of the invention, the software 20 further incudes ^ s ™ hj d tne SID 28 is 

50 number storage location (CHKSTOR) . M ^^^^^^SmM software 20. The SID is 
a unique code associated with and identifying the .source of the as from use or 

either selected by or assigned to » ^^,3,^ lo Stlon known to the ENCRYPT routine, 

copying. The SID 28 is written onto the diskette 12 an addre ^J^J™^ ^ ENC RYPT modules, and 
CHKSTOR 30 is a storage area whose .» !^ * ^^ S ££ INSTALL module 21 to mean 

which is either blank or initialized with a vendor-instelled I code by the INSTALL and INITIALIZE 

that CHKSTOR 30 is empty. The ENCRYPT module 32 s a ^J^™^ ^rform encryption of the SID 
modules 21 and 22 and embodying any known encryption process wn.cn ca 

and a CPUID described below. nrovision of a CPU identification (CPUID) 36 in the 

Also necessary to the practice of the '™en£onjs the | P™^ read ^ly memory (ROM) of the personal 
personal computer 10. The CPUID 36 is a •f^^^^'SS JL serve to unique* identify the 
computer 10. In the preferred embodiment, the J^^g^L™ 16 bits of the CPUID form a validity 

personal computer 10. The word has the form* ^ shown n Fjgure JJJJJid^ conditions established by the 
flag appropriate for indicating whether the CPUID "^£^"^£2 bits of the CPUID 36 are chosen 
r£iu£*!rer. in order to avoid the need for standard** on ^^"'"J* is vanishing* small. It is 

at random; thus, the probability of two personal computers having the same 
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further asserted that the CPUID is located in a standard location whose address is the same from one personal 
computer to the next. Last, the address of the CPUID 36 is known to the ENCRYPT module 32. It is 
contemplated that the CPUID would be generated, placed in ROM, and installed in the PC 10 by the 
manufacturer of the PC. 

As specified, the ENCRYPT module 32 is a process automatically called by the INSTALL and INITIALIZE 5 
modules during their executions. Figure 2 symbolically illustrates the ENCRYPT module 32 being performed by 
the CPU 14. When executed, the ENCRYPT module obtains the CPUID 36 from its addressable location in the 
PC 10 and obtains the SID 28 from its addressable location on the diskette 12. When obtaining the CPUID, the 
ENCRYPT module employs a conventional validity checking modality to ascertain whether the CPUID meets 
the pre-established validity requirements. In the discussion following, it is presumed that the CPUID is valid; if w 
not, the evasion and/or protection features described below can be implemented. The SID 28 is obtained by a 
standard READ function in the PC 10. The CPUID 36 and SID 28 are subjected to the encryption algorithm 
embodied in the ENCRYPT module 32 to produce a check number, or code (CHK), if the ENCRYPT module 32 
is called by the INSTALL module 21 , the positive exit is taken from the decision 40 and the WRITE function 42 is 
called to write CHK into the first available spot in the CHKSTOR sector 30 of the disk 12. In Figure 2. a check 1$ 
number is entered in location 44 of CHKSTOR 30. Alternatively, if the ENCRYPT module 32 is called by the 
INITIALIZE routine 22, the READ function 38 is invoked to obtain CHK from location 44 on the disk 1 2 whence it 
is provided to a COMPARE function 46 embedded in the ENCRYPT module 32. In addition, the check number 
generated by the ENCRYPT module 32, instead of being written to CHKSTOR on the diskette 12, is also 
provided to the COMPARE function 46. The COMPARE function 46 is a conventional procedure used to 20 
determine whether the check number generated by the ENCRYPT module 32 is identical with CHK 44. If the 
output of the ENCRYPT function 32 does not compare with the check number 44, the output of the COMPARE 
function 46 indicates such a disparity and is used to invoke the COPY PROTECT module 26 or an EVASION 
step built into the INSTALL and INITIALIZE modules. 

Referring now to Figures 3-5 and Tables Mil, the operation of the invention and its method embodiment will 25 
be explained. The method is executable during the three major phases of software operation listed in Table \v' 
Thus, the method is invoked by the INSTALL module 21 when the diskette 12 is loaded into the PC 10 for 
establishing or changing global operating parameters of the PC. The method is also operated whenever the 
diskette 12 is inserted into the disk driver 18 for execution of the APPLICATION module 24 or whenever the 
diskette 12 is inserted into the disk driver 18 for the purpose of copying the software 20 to another diskette 30 
through invocation of the COPY command of the PC 10. ? 
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TABLE _I 
INSTALL 

EXECUTE APPLICATION 
COPY 

TABLE II 

INSTALL PROCEDURE 

DO INSTALL 

DO ENCRYPT 

IF CHKSTOR NOT INITIALIZED , 
THEN, WRITE CHK TO CHKSTOR 
GO TO CONTINUE INSTALL 
ELSE 

IF MCF AND CHKSTOR IS NOT FULL, 
THEN, 

IF CHK EQUALS A CHK IN CHKSTOR 

GO TO CONTINUE INSTALL 

ELSE 

WRITE CHK IN CHKSTOR 
GO TO CONTINUE INSTALL 
END 
ELSE , 
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IF CHKSTOR IS FULL 
THEN, 

EVADE EXECUTION 
ELSE , 

IF CHK DOES NOT EQUAL CHK 

IN CHKSTOR 

THEN 

EVADE EXECUTION 
ELSE 

GO TO CONTINUE INSTALL 
END 

CONTINUE INSTALL 
END 

TABLE III 

EXECUTE APPLICATION 

DO INITIALIZE 

DO ENCRYPT 

IF CHK DOES NOT EQUAL CHK, 
THEN, EVADE EXECUTING 
ELSE CONTINUE INITIALIZE 

END 



CALL APPLICATION 
END 



0 302 710 



10 



15 



20 



As shown in Figure 3 and Table „. when the software 20 is initia^y ^^^^^ 
is called to establish the parameters in conf.gurat.on of ^.^.^Jf^'SfSe ENCR YPT module 32 
execution of the APPLICATION 24. During the Performance of ^^^^S^. „ nothi ng has been 
is called, the CPUID 36 and SID 28 are obtained ^..^^g^ 0 a R C ^ N ^,Sla process is continued, 
written to CHKSTOR, the generated CHKNO » wn ten to CHKSTOR and XUe MNb P ^ vendor 

Otherwise, if the CHKSTOR is not ful. and rf a multichec teg ^MCF) ^ JrS^ofCPU's will access it. In this 
contemplates the sale of the right to *^"*»f™!^^ LmCed against the CHKs already in 

ch^tTr=^ 
™c^^^ 

have qualified, in which case an exit EVADE EXECUTION sin qle CPU, the generated CHKNO is 

On the other hand, EVADE EXECUTION exit 

li^o^^S^^2^ - assumpt,on being ,hat ,he software ,s 

of the APPLICATION 24. In its simplest form, the evas.ve acton "^ X^S* destroys or alters 

r^^^^rr^^ « « - - — • 

gibberish. . r 10 .. , assume d that the software 20 will not invoke the 

Once the software 20 has been installed on the PC 10. it « ^^""J 3 ^ the diske tte 12 is inserted into 
INSTALL procedure unless P-^^^- SSL^SClSSlS procedure 22 is automatically 
the driver 18 for execut.on of the APPUCATON £°«JJ^ toh w fQf execution . , n 

25 invoked in order to establish connectivity between the software^ ana me i jw cpu|D gg 

is completed and the application ^ 's executed command by a personal computer 

As shown in Figure 5, whenever the d.skette iz is si ^jecxea io copying personal 

the ENCRYPT process 32 is called to ge nenjajeck £ U ^J™ ™ ™ in CHKSTOR 30. COPY 
computer and the SID on the disk. If the f^^^^^^Q * *■ software 20, including 
PROTECT 26 is invoked, otherwise, COPY is executed, wnic ir resu is inc wr* so{tware copied onto 
CHKSTOR 30. Thus, the software protect.cn scheme o the ™ be executed without 

another diskette. Alternatively, the inventor contemplates a . J 0PY jnvention would s ,„, be 

encryption in comparison of check n umbers since the P r ^^^^ 

« ciSSSS» proceed further than 

INSTALL or INITIALIZE. ,„„„„«„,, to Tables II and III and Figures 3-5 is useful for 

As disclosed thus far. the invention a, i operated according ^bl^l and... a^ g^^ 

automatically authorizing use or rephcatior .of _the d.skette a software vendor would lease 

45 system such as the PC 10 identrfied by the CPUID 36. In the case J^re a authorized to use the 

sofSe on a site lease basis with a predetermined number of unified CPUs ^°r 1J? tQ ^ 

software, the capacity of CHKSTOR 30 to store ^^^^^[ JSg of CPUs. In this case, 
installed in. for example, a file server (not file server with the diskette 12 in 

each time a CPU with a CPUID is installed in the comp iut.ng sys ^ JJJJJOJ* make entries into the program 
50 it, an INSTALL routine similar to that of Figure 3 would ^^'^^J^ftJihe CPU being installed and 
parameter list for the installed CPU. but also to ^"J^^^p^SSoN 24 is executed by a CPU 
enter the check number into CHKSTOR 30 ^ereafter '^^^^Sm a „ of CHKSTOR 30 until 
connected tothe file server. ^^S^SS^SSSi^^ of CHK numbers, 
either a match was found, or the end of ^^^^^^LlZ made by authorized CPUs would be 
55 It is further contemplated that copies ^"SfiZSZX^ In the CHK = CHK step of 

executable only on the copying CPU. In this regard, proy sion i wou a OR3Qb y scann ing CHKSTOR. 
Figure5forconf.rmingthattheCPUIOofthecopy.ngCW slots jn 

Assuming validating the DO COPY module would ™* wou Td ^event the copy from being 

CHKSTOR, save the one containing the CPUID of the copying CPU. This woura preve 

60 initialized for an unauthorized CPU: „u^i m «r,» .,«.fui in for example, a battlefield 
Figure 7 illustrates an adaptation of the invention to. " «*o*menr useful ^™*™* m ^X*cX** 
situation wherein battlefield orders are ^^ om ^ 9 ^Z^t^C^ EaXtical CPU is referred 
polons. each including a compute apparatus ^^gff^^S^ post has a CPU for 

« £ s £ g or^^^^ 
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CCPU and has a secure identification (CCPUID). Thus, in Figure 7, the command post computer 50 has 
embedded in it the secure CCPUID 52 and stores a secure list of field CPUIDs 54. A public-key encryption 
modality 56 encrypts the CCPUID with a selected FCPUID to generate a check number CHKNO which is placed 
on a diskette 58 at position 59. In addition, orders in encrypted form are written to the diskette 58 using the 
public-key process, and the diskette is then carried to a tactical field post having a fold CPU 70. 5 

The diskette 58 is plugged into the field CPU 70, where a routine similar to the INITIALISE routine of Figure 4 
is performed. In this routine, installation of the diskette 58 in the CPU 70 invokes a public-key decryption 
process 72 which is the inverse of the encryption process 56. The decryption process 72 can be included in the 
software on the diskette 58. The FCPUID 74 of the field CPU 70 and a public-key 76, which is known to the 
operator of the CPU 70, are fed to the decryption process which operates conventionally to decrypt the orders 10 
in encrypted form on the diskette 58. If the FCPUID of the CPU 70 matches the FCPUID used to encrypt the 
orders on the diskette 58, the decryption process will produce a clear text of the command post orders. 
Otherwise, either no action is taken to decrypt the software, or protective action to destroy or alter the 
software is undertaken. In this manner, orders can be transmitted using a relatively simple and straightforward 
scheme to protect the orders by a first level of encryption in which a known password or key and a secret 15 
password (the FCPUID) are provided to unlock access to the orders only in the event that the recipient of the 
physical embodiment of the orders (the diskette) can generate a key or password identical with the one on the 
diskette. 

It should be evident that the embodiments of the invention do not prevent illegal use on copying by a 
knowledgeable, determined person. However, they have the advantage of providing an inexpensive, easily 20 
implemented means of making unauthorized use or copying very difficult, yet which makes authorized use or 
copying easy. 
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Claims 



1. A method of controlling the use and replication of diskette software contents and the like on 
unauthorized diskette-driven computing systems, said method comprising the steps of: 30 

placing a first ID code in a preselected computing system ; 

associating a second ID code with a source of programming software for said computing system; 
placing said second ID number on a diskette bearing a program obtained from said source, said program 
including an execution non-compliance feature ; 35 
deriving a first check number through encryption of one of said ID numbers by the other of said ID 
numbers; 

placing said check number on said diskette; and 

upon access of said diskette by any computing system, deriving a second check number through said 
encryption based upon said second ID number on said diskette and an ID number in said accessing 40 
computing system, comparing said second with said first check number, and bypassing the 
non-compliance feature in the event of a match. 

2. A method as claimed in Claim 1 wherein said second ID and said first check number are placed in said 
diskette when said program is installed in said computing system. 

3. A method as claimed in Claim 1 or Claim 2 wherein said access includes execution of said program. 45 

4. A method as claimed in Claim 1 wherein said access includes copying of said program to a second 
diskette. 

5. A method as claimed in Claim 1 wherein said step of placing said check number includes writing said 
check number to a predetermined storage area on said diskette, said predetermined storage area 
including storage space for a plurality of check numbers, and said step of comparing includes comparing 50 
said second check number with a check number in said storage area. 

6. A data processing system for authorizing use of diskette software contents on authorized computing 
systems, comprising : 

a diskette for storing application programs ; 55 
a first computing system for entering software on said diskette, and including a first ID code identifying 
said first, and a secure list of ID codes identifying CPUs authorized to execute said software; 
an encryption modality in said software for generating a first check number based upon an ID code from 
said list, said first check number being written onto said diskette with said software by said first 
computing system; 60 
a second computing system with a CPU for receiving said diskette and executing said software, said 
second computing system including a second \p code identifying its CPU; 

encryption means executable on said first and second computing systems for generating a first check 
number based upon public-key encryption of paid first ID code and a second ID drawn from said list, said 
first check number being written onto said diskette with said software, and for generating a second check 65 
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number based upon said public-key ^^^^^J^^^!^ execution of said software by 
means for comparing said first and s "^ n c ^ ^ check numbers, 
said second computing system basea upon ir.ismatcn 
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® A method of controlling the use of computer programs. 



© The copy protection of personal computer (PC) 
software distributed on diskettes is assisted by pro- 
viding a unique identification (ID) stored in read only 
memory (ROM) of a personal computer in which 
software on a diskette is to be used. This ID is 
accessible to the user of the computer. A vendor 
who wishes to protect his diskette-distributed soft- 
ware from illegal copying or use provides a source 
ID on the diskette. The personal computer ID is used 
with the source ID on the distributed diskette to 
produce an encoded check word, using any avail- 
able encryption modality. The check word is gen- 
erated and written onto the distributed diskette dur- 
ing installation and copied onto all backup versions 

3 made by the user's personal computer. Prior to each 
use of the program, the software on the diskette 

Ouses the personal computer and the source IDs and 
check word to verify that the software is being used 
on the same personal computer on which it was 

fij installed. 
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